Players of Meccha Chameleon discovered that custom maps shared via Steam Workshop contained malicious code designed to execute on their systems during downloads. Security researcher Feint identified the threat after noticing command prompt windows appearing unexpectedly whilst maps loaded, revealing that uploads such as Laser Tag Neon had somehow circumvented the workshop's review procedures. In response, developer Haganeiro released version 3.1.0 to patch the underlying vulnerability and confirmed that malware was neutralised across all previously affected maps.

During this same security crisis, the game's official Discord community—with a membership base of nearly 100,000—fell victim to an account breach. The developer acknowledged the incident via a Steam Community announcement and reported having reached out to Discord's team to address the unauthorised access.